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Counterfactual distribution of cat states 
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In the counterfactual cryptography scheme proposed by Noh (2009), the sender Alice probabilis¬ 
tically transmits classical information to the receiver Bob without the physical travel of a particle. 
Here we generalize this idea to the distribution of quantum entanglement. The key insight is to 
replace their classical input choices with quantum superpositions. We further show that the scheme 
can be generalized to counterfactually distribute multi-partite cat states. 
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I. INTRODUCTION 

Counterfactual quantum communication mm allows 
information to be transmitted even without the physi¬ 
cal travel of a particle. It is based on interaction-free 
measurements, where one tries to detect a quantum ob¬ 
ject without directly interrogating it [3]. Ref. [1] pro¬ 
posed a method to increase the efficiency (of 50%) of 
the counterfactual effect in the original Elitzur-Vaidman 
protocol [3] towards 1 by concatenating unbalanced beam 
splitters, each of which effects the transformation |0) —>■ 
cos0|O) -I- sin0|l) and |1) —>■ —sin61|0) -h cos0|l). This 
constitutes the quantum Zeno effect (QZE), wherein re¬ 
peated measurements or ‘interrogation’ of an initial state 
freeze evolution. 

Briefly, this works as follows: light in state |0) is in¬ 
cident on a beam splitter. An obstacle is placed in the 
output arm |1). The obstacle in the state “block” elimi¬ 
nates the corresponding amplitude in the superposition, 
whereas in the state “pass”, it does nothing. Chaining 
the above interferometric action leads to the evolution: 

I block) 10) —^ cos^ 0|block)|O) 

|pass)|0) — S' |pass)(cos(L0)|O) -I- sin(L6>)|l)), (1) 

where L is the number of interferometric cycles, and the 
unnormalized state in the first equation indicates absorp¬ 
tion at the obstacle. Setting 0 = ^, let L —>• oo. The 
result has full counterfactual efficiency in that the obsta¬ 
cle set in block mode always produces a distant detection 
in the output |0) arm. 

Counterfactuality has also been applied to both cryp¬ 
tography and computation lilZl- Since the proposal 
of the counterfactual key distribution protocol Noh-2009 
(N09) [H], there has been an upsurge of interest in this 
area, leading to contributions devoted to improving its 
efficiency pun], to security considerations under vari¬ 
ous attacks mHS], to modified communication schemes 
[nils], applications [THIfT3] and experimental proposals 
or realizations [19] . 
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II. COUNTERFACTUAL QUANTUM STATE 
TRANSFER 


The method of Eq. ([^ can be used for direct and 
deterministic communication of classical bits from Bob 
located at the obstacle to Alice located at the interferom¬ 
eter output arms. But as a communication protocol, this 
method is not counterfactual for the case “pass” since the 
photon encounters no obstacle. To make both bit values 
counterfactual, m proposes the chained quantum Zeno 
effect (CQZE) set-up, which nests the above L-chained 
interferometer within a chain of M “outer” unbalanced 
beam splitters, in such a way that at each inner cycle, 
the outcome arm corresponding to “pass” would lead to 
detection at a detector A. One sequentially evolves the 
state through each of the outer interferometric cycles, 
which gives a recursion relation for amplitudes for each 
cycle, analogous to Eq. ([^. By suitable choice of L and 
M, one can obtain direct communication of bits from 
Alice to Bob. This is argued to be fully counterfactual 
in the sense that Bob’s both “pass” and “block” choices 
correspond to blocking actions. (Regarding this interpre¬ 
tation, see Refs. [20].) 

Now, the method of Eq. Q can be readily adapted 
to one for direct communication of qubits (rather than 
bits) from Bob to Alice by letting the obstacle to be 
in the superposition state a|pass) -I- /3|block) [2T1 1^ . 
An initial state (a|pass) -I- /3|block)) 0 |0) of the obsta¬ 
cle and the particle evolves to (a|pass) -I- /3|block)) (g) 
(cos0|O) -I- sin0|l)) after the particle passes through the 
first beam splitter. Eollowing the particle’s interaction 
with the obstacle placed in arm |1) after the beam split¬ 
ter, the state becomes \Jl — sin^(0)[a|pass)(cos0|O) -I- 
sin0|l)) -I-/31 block) 10)]. Here the global pre-factor, which 
is the square root of the particle’s survival probability, 
comes from the fact that /3^ sin^ {9) is the probability 
that the photon is absorbed at the obstacle. Just after 
the second beam splitter, but before encountering the ob¬ 
stacle, the state is — sin^(0)[a|pass)(cos(20)|O) -I- 

sin(20)|l)) -I- /31 block) (cos 010) -I- sin0|l))]. Proceeding 
thus, just after the application of L beam splitter pas- 
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sages, the state transforms as: 

(alpass) + /?|block))|0) —>■ [l — sin^(0)] x 

[a|pass)(cos(L0)|O) +sin(L0)|l)) 

+ /31 block) (cos 010) +sin0|l))] 

—>■ a|pass)|l) + /3|block)|0) (2) 

where the right-arrow in the last equation indicates tak¬ 
ing the limit L —oo with d = ^. (Note that this limit 
restores the normalization.) 

If the L-cycle is nested in an M-cycle as described 
above, then analogous to the superposition the fi¬ 
nal state after passing through the M outer cycles, by 
adjusting L and M, can be brought to the form: 

l^'fln) « a|pass)|a;) - /3|block)]?/), (3) 

where x,y label the output arms of the Mth outer in¬ 
terferometer. Note that the entangled state j'kfin) de¬ 
pends on Bob’s initial state ajblock) -|- /3|pass). With a 
Hadamard and 1-bit classical communication, Alice can 
recover Bob’s state in the {ja:), ]?/)} basis (see later be¬ 
low). This forms the essence of the protocol of Guo et 
al. [22| for quantum state transfer. It requires only 1 bit 
for deterministic quantum state transfer, unlike standard 
quantum teleportation, which requires 2 bits, because 
teleportation uses a standard Bell state as the entangle¬ 
ment resource, whereas the above protocol uses the state- 
dependent entanglement ^ . We note that even without 
the classical communication, the protocol succeeds half 
the time, such that the fidelity of the transmitted mixed 
state is 1 for polar qubits, falling gradually as | cos(0)| to¬ 
wards 0 for equatorial (0 = |) qubits of the Bloch sphere 
in the {jblock), jpass)} basis. 

That the counterfactual quantum protocol to transmit 
a classical bit m is direct and deterministic suggests 
that a protocol for quantum state transfer built on top of 
it can also be that way. Ref. [21] proposes one way to do 
this: a polarization-based “dual” CQZE scheme, which 
essentially first entangles Alice’s and Bob’s input during a 
“counterfactual CNOT operation”, and then disentangles 
them using a second counterfactual CNOT in such a way 
that the combined action swaps Alice’s state |0) with 
Bob’s state ajpass) -|- /3|block) deterministically. Note 
that the swap of two generic qubit states requires three 
CNOTs, in constrast to the two CNOTs that suffice for 
the states considered here. 

In the present work, we propose to use N09 instead of 
the CQZE system, as the basis for counterfactual distri¬ 
bution of entanglement. Like the state ([^, this entan¬ 
glement will depend on the initial superposition states of 
Bob’s obstacle and Alice’s input. Unlike them, however, 
in our case the state-dependent entanglement is gener¬ 
ated probabilistically. Once generated, this entanglement 
can be used for deterministic quantum state transfer with 
a 1-bit communication, as in the Guo et al. protocol. 
Though our method has a lower yield than the methods 
of Refs, [m [^, still our experimental set-up is sim¬ 


pler in that we do not require a large chaining of beam¬ 
splitters. Eurther, the schemes (ST) [22] pertain to the 
bipartite case, whereas our method is generalized to one 
that can counterfactually distribute multipartite quan¬ 
tum states, in particular (A^-l-l)-partite cat states, where 
N, an integer greater than 1, is the number of players who 
initiate the protocol. 

The remaining article is structured as follows. After 
briefly describing the N09 protocol in Section III we show 
in Section |IV| how to modify it for the purpose of bipar¬ 
tite entanglement distribution, essentially by replacing 
bits a and b by qubits, and correspondingly replacing Ra 
and Rb, the classical random number generators, by their 
quantum counterparts, which can generate superposition 
states. Section|V|discusses using the counterfactually dis¬ 
tributed entanglement for the purpose of quantum state 
transfer, comparing our method with those of counter- 
factual schemes of [2l[|22] and standard quantum tele¬ 
portation. In Section [VT| we extend the bipartite scheme 
to that of generating multipartite cat states, by introduc¬ 
ing a quantum network with a star topology. In Section 
|VII[ we discuss candidate physical systems for practical 
implementation. Finally we discuss some implications of 
our scheme for physical interpretation, the extension of 
the scheme of Ref. [22] for the counterfactual distribu¬ 
tion of cat states, and offer some conclusions in Section 

Eml 


III. COUNTERFACTUAL COMMUNICATION 
OF CLASSICAL BITS: THE N09 PROTOCOL 


To set the background, we briefly describe N09 as fol¬ 
lows. The basic set-up of the N09 is similar to the one 
shown in Fig. The sender (Alice) and the receiver 
(Bob) are connected to each other through arm R of a 
Michelson interferometer. The arm A is internal to Al¬ 
ice’s station and a photon travelling along this path is 
reflected using a Faraday mirror (EM). Alice’s station 
also consists of a single photon source {S) which pre¬ 
pares polarization states in the vertical (V) or horizon¬ 
tal (H) direction, based on the output a of a random 
number generator Ra- Bob’s module Q consists of de¬ 
tector Db and an EM which absorbs or reflects photons 
in a polarization-dependent way based on the state of a 
switch. The switch state is P (“pass V and block H”) or 
B (“block V and pass H ”), as determined by the output 
6 of a random number generator Rb- The protocol runs 
as follows: 

1. Depending on the random bit a, Alice prepares sin¬ 
gle photon states randomly in U or R polarization, 
and transmits them to Bob, who applies P or B 
actions randomly based on the random bit b. 

2. The possibilities of Alice’s and Bob’s random 
switching actions, and the corresponding condi- 





tional probabilities, are: 
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(Alice, Bob) 

Di 

D 2 

P>B 

{V,P) 

or {H, B) 

0 

I 

0 

{V,B) 

or {H, P) 

RT 


T 


In the first case, deterministic detection of D 2 be¬ 
cause of constructive interference between the two 
reflected photons. Here R and T are the coefficients 
of reflectance and transmittance respectively of the 
beamsplitter (BS), and satisfy R + T = 1. 

3. After the protocol run, Alice announces instances 
where she made Di detections, and use the polar¬ 
ization {V or H) as a secret bit. The D 2 detections 
are used for security check. 

The case of Di is counterfactual in the sense that the 
particle did not physically travel to Bob’s station, and 
his blocking action leads to a remote detection by Alice. 
The counterfactual yield is RT/2 and, in the noiseless 
case, would represent the positive key rate. 


FM 



D 2 D, 


FIG. 1. Basic schematic for N09, where a and b take random 
classical bit values. For its adaptation to counterfactual gen¬ 
eration of bipartite entanglement, a and b are qubits that can 
exist in arbitrary superposition states. C denotes a circulator. 
The switch Q implements pass-T-block-// or pass-//-block-y 
on the incoming photon, depending on b. To distribute en¬ 
tanglement counterfactually, Q is entangled with Bob’s input 
b. 


IV. COUNTERFACTUAL BIPARTITE 
ENTANGLEMENT GENERATION: A NEW 
SGHEME 


We shall now adapt N09 to distribute quantum entan¬ 
glement. We begin with the demonstration of our idea to 
counterfactually generate bi-partite entanglement. The 
basic idea can be indicated again using Figure The 
key new element is that Ra and Rh are now quantum 
random number generators that produce qubits a and b. 
Let qubit b be given by |^/>)6 = a\P)b + l3\B)b and a by 
\(j))a = t^\V)a + Then, the initial joint states of 

the Ra, Rb, Bob’s detector and the optical field can be 
written as. 


\'fo) = \<l^)a\0)Ds\^)b\'i>)AB (5) 

= {fi\V)a + iy\H)amDsHP)b + l3\B)bmA\0)B, 

where |'I'o)ab = |0)a|0)b is the initial vacuum state of 
the channel, represented by the interferometer arms. 

Alice’s random number generator Ra now determines 
the polarization state of the photon. Under interaction 
with Ra and BS, the state Iffo) evolves to: 


\^,) = {a\p)b+mbmD, 


(/r|U), [iVR\V)A\0)B + Vt\0)a\V)b 

iy\H)aUy/R\H)A\0)B + Vf\0)A\H)B]) ( 6 ) 


Let |0 )d^ and \Y)db represent the initial state of Bob’s 
detector, and the state of his detector after detecting a 
photon. We represent the switch action on Bob’s side 


thus: 


\P)b\V)B\0}DB ^ \P)b\V}B\0)DB 
\P)b\H)B\0)DB ^ \P)b\0)B\Y)DB 
\B)b\V)B\0)DB ^ \B)b\0)B\Y)DB 

\B)b\H)B\0)DB ^ \B)b\H)B\0)DB ( 7 ) 


Post-selected on Bob’s detector being found in the state 
|0)r’B , the optical field in state jlki) evolves under Q to 
the un-normalized state 


\'i>2) = a\P)b [ti\V)a [iVR\V}A\0}B + Vf\0) a\V)b 

+ u\H)a [iVR\H)A\0)B]) 

+ P\B)b[b^\V)a [iVR\V)a\0)b 

+ v\H)a \i^\H)a\Q)b + Vf\{))A\H)B] ) ,(8) 


with probability P{Db) for Bob’s detector being found 
in state \Y)db being 


P{Db) = 1 - I('k2|^2)|" = + \M^)T. (9) 


In the last phase, the light re-enters Alice’s system. It 
is convenient to represent the BS transformation in the 
return path, together with the reflection on Bob’s side, 
by: 

\0)A\x)B^VRm)+i'/Tm) 

\x)a\0)b ^iVf\D-) + VR\D-), ( 10 ) 

where x = V,H, and \Dj) denotes the state of detector 
Dj when it detects a photon of polarization x. 

Thereby the post-selected state |fl' 2 ) evolves to I'I'a) = 
I^ 3 )| 0 )£'b: where 






































\'^>'3)=a\P)l,[^^\V)a\D^)+ly\H)a [iVR{iVt\D^) + VRID^))]'^ 
+ l3\B)b (^^l\V)a [iVR{iVf\DY) + Vr\D^))\ + )) 
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( 11 ) 


If the superpositions in a and b are replaced by their 
projective measurements prior to the photon entering 
the interferometer, then the present protocol reduces to 
N09, in particular reproducing the conditional probabil¬ 
ities 0. For example, from Eq. we have P{Db) = 
{\av\’^+ |/3^P)T. From Bayesian analysis we have 
P{Db) = P{DB\HaPb)P{HaPb)+P{DB\VaB^)P{VaBi,). 
Now P{HaPb) = P{Ha)P{Pb) = |ai/|2 and = 

P{Va)P{Bb) = l/3/rp, where P{Ha) etc., are probabilities 
to obtain the designated outcome under projective mea¬ 
surement of the corresponding device (Ra or Ri,). Equat¬ 
ing these two expressions for P{Db) and noting that this 
holds true for arbitrary protocol parameters, we find that 
P{DB\HaPB) = PiDB\VaBb) = T, as given in Eq. Q. 

Now, conditioned on Di being detected (which corre¬ 
sponds to the projector J2h have the 

counterfactual situation with the resulting (unnormal¬ 
ized) state being 

\^) = Vm' {au\H)a\P)b + |3^i\V)a\B)b), ( 12 ) 


where the counterfactual yield is seen to be 
P{Db)=RT{\a,y\^ + \/3^l\^). 


(13) 


We note that the beam splitter function y/RT — 
\/R{l — R) does not determine the degree of entangle¬ 
ment generated counterfactually, which depends only on 
the initial superposition states held by Alice and Bob. 
A Db detection results in the entangled (unnormalized) 
state T {ai'\H)a\P)b + PtJ‘\V)a\B)b), which differs from 
state (121 by a constant factor. However it is not coun¬ 


terfactual. Similarly, a Z ?2 detection, which happens with 
probability 


P{D2) = + WfR^) + + \^lfR^), (14) 


non-counterfactually produces the state a{^\V)a + 
i/R\B:)a)\P)b + |3{i^J.R\V)a + I^\H)a)\B)b, which is in gen¬ 
eral entangled. 

Intuitively, the above scheme can be thought of as tri¬ 
partite entanglement being established between the pho¬ 
ton, Alice’s device Ra and Bob’s device Rb, after which 
the photon is projected out in a suitable basis, leaving 
Ra and Rb entangled. 


V. COUNTERFACTUAL QUANTUM 
INFORMATION TRANSFER IN THE NEW 
SCHEME 


By means of the state-dependent entanglement so ob¬ 
tained, a quantum state transfer can be implemented ei¬ 
ther from Alice to Bob or from Bob to Alice, with a 1-bit 


r 


communication. The sender puts the input in the re¬ 
quired unknown state, while the receiver prepares her/his 
input in an equal-weighted superposition in the default 
basis. Eor example, suppose that it is desired to transfer 
Alice’s state \(j))a = ^J'\V)a + >^\H)a to Bob. Bob prepares 
his input state with = P = From Eq. (12), we 
see that Alice and Bob (probabilistically) will share the 
state i^\H)a\P)b + f^\V)a\B)b. Applying a Hadamard on 
Alice’s qubit in the {V,H} basis results in the state 

^(z.|P)6 - f,\B)b) + + (^\B)b)- 

Measuring in the {V,P[} basis, and depending on whether 
Alice finds outcome V or H, she communicates a 1-bit 
message to Bob, which instructs him to apply the Pauli 
operation Z or / in the {P, B} basis. Bob is then left 
with the reconstructed state: \(j))b = fJ-\B)b + T^\P)b- 
This situation is analogous to that encountered in 
Ref. [H], except that there the state-dependent entan¬ 
glement is deterministically generated (in the asymptotic 
limit of the number of beam splitters), whereas in our 
case, it is generated probabilistically, with probability 


R{l-R) 


as follows from Eq. (13). De- 


P(Ui) = ^ = _ 

noting by the term Cq the number of photons consumed 
(or runs required) on average per counterfactual event, 
we have Cq = ppjjj = r(i-r) ■ The minimum value 
of Cq is C™™ = 8 photons (or runs), which is attained 
at P = /. In other words, 


2 . a balanced beam splitter 

minimizes the quantum resource used. The situation is 
slightly different for the average classical communication 
required, as shown below. 

Assuming the communication channel to be noiseless, 
and the light to consist of single-photons, the average 
communication cost for generating an entangled pair is: 


C = h 


P(l-P)' 
1 + P 


(15) 


where h{x) = —cclog 2 (a:) — (1 — a:) log 2 (l —x) is the Shan¬ 
non binary entropy. From Eq. ( [T^ , we see that cost C 
increases without bound as P —>■ 0 or P —1. This can 
be anticipated, referring to Eq. ( 0 , where we find that 
the number of counterfactual (Pi) events tend to vanish 
in either limit, thereby necessitating a large communica¬ 
tion cost. Note that since each run requires at most one 
bit communication, therefore as a thumb rule, cost C in 
(15) cannot be larger than C^j, at a given P. 


To derive (15), suppose that n runs have been con¬ 
ducted, and Bob’s input state is chosen with a = j5 = ^ 
in each run. Then the probabilities for the different out¬ 
comes Di,IP and Dr are just the conditional probabili¬ 
ties in Eq. (0 


with a factor ^, independent of /r and v, as 
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follows from Eqs. and . For sufficiently large 

n, about ^ detection events Db occur, during which Al¬ 
ice has no detection, but obviously does not need to com¬ 
municate this information to Bob. Thus on average, only 
on the remaining ub = nP{-^DB) = n (l — 
of events does Alice need to communicate to Bob about 
whether a Di or D 2 event happened. 

Detections Di and D 2 occur among these events, with 
probability P{Di) = RT/2 = and P{D 2 ) = 

, respectively, as seen from Eqs. (13) and ( [l^ . 
Therefore the probability of a Di or IJ 2 event m 
the outcome space of uou-Db events is p'{Di) = 
P{D^)/P{^Db) = and p'{D 2 ) = l-p'{D^) = 

respectively. Therefore, the bit string about ub 
long, corresponding to events when Alice needs to com¬ 
municate, can be compressed (by Shannon’s noiseless 
channel coding theorem [23]) to rig = h[p'{Di)]nB bits. 
On average, these events resulted in the counterfac- 
tual distribution of ni = nP[Di) = ^i?(l — i?) state- 
dependent entangled states. The ratio n*Bln\ gives the 
required expression for the average classical communica¬ 
tion cost (15). 

To minimize cost C, note that the rhs in Eq. (15) has 
the form which falls monotonically as ^ goes from 

0 to 1. Now the argument of h{-) in Eq. (15), namely 
^ = R{1 — R)/{I + R), takes values only in the range 
[0,1]. Thus the required minimum for C is obtained by 
minimizing ^ as a function of R, which is seen to occur at 
R — 1 / 2—1 ~ 0.414, with the corresponding average com¬ 
munication cost being « 3.85 bits. We 

note that (7““ < C“™, and that the latter minimum oc¬ 
curs at i? = ^. For the case of a balanced beam splitter, 
we find ( 71 ^= 0.5 ~ 3.9 > C“™. The minimum number of 
bits of classical communication required on average us¬ 
ing our counterfactual teleportation is C™'" -|- 1 « 4.85 
bits. This is larger than the 2 bits sufficient (and neces¬ 
sary) for standard quantum teleportation, 1 bit for the 
[22] protocol and 0 bit for the protocol of [21]. Of course, 
these three schemes being deterministic, Cq = \ for each 
of them. 


VI. EXTENSION TO CAT STATES 

We now show how to extend the above method of 
counterfactual generation of bipartite entanglement to 
{N + l)-partite entanglement. It will be convenient here 
to regard the ‘quantized’ version of as the action of a 
propagator. Then the ‘partial propagator’ relevant here 
has the action: 

\P)b\H)amAB ^ Viff|P)/i/)/Df) 
\B)b\V)a\-^)AB ^ /Rr|S)b|V)/D/), ( 16 ) 

where by ‘partial propagator’ we mean that the evolved 
final state is post-selected only on Di detections. 



FIG. 2. Multipartite counterfactual entanglement distribu¬ 
tion: We consider a star topology, with a single Bob at the 
network hub, who shares the set-up of Figure[^with each of N 
(here: A = 3) Alices. Bob’s quantum choice must be jointly 
applied to all N channels on his side. 


Now we can generalize the set-up of Figure [T] to coun- 
terfactually distribute an {N + l)-cat state, as shown in 
Figure [^ which illustrates the network for the distribu¬ 
tion among four parties. Typically, it is described by a 
star topology, with Bob at the network hub and the re¬ 
maining players (who we call Alicei, Alice 2 , et ah, for 
convenience) situated at the spoke nodes. Bob is con¬ 
nected according to the circuit of Figure [T] with each 
AlicCj separately. The only requirement is that Bob’s 
quantum device Rh makes a common choice for all Al¬ 
ices’ particles. 

For instance, considering the case of A = 2, the ini¬ 
tial state of the two Alices and Bob, given by |'I' 4 ) = 
®]=MV)+yAH))aM^\P)b+mbmA,BA'^)A.B,^ 
where |V’)aiBi (|' 0 )a 2 B 2 ) indicate the optical channel be¬ 
tween Alicei (Alice 2 ) and Bob, evolves under the partial 
propagator (16) to 


|'I'eat)aia2b = RT {pirpi2P\VVB) + ir,i^2a\HHP)) , 

(17) 

with the counterfactual yield being (i?r)^(|/ri^2/3/ + 
|j^W2a/)- 

It is straightforward to extend the above exercise to N 
Alice’s, thereby producing a (A -|- l)-cat state between 
these Alices and Bob. The initial state is taken to be 


N 

0 {a\P) + l3\B))t, 


1=1 


(18) 


which evolves under the evolution (16), corresponding to 
post-selection on all Alices detecting Di, to the state: 

IvI-t) = {RT)^/^aU^\V)f^\B)k + pn,\H)f^\P),, (19) 


where 11^ = pifi 2 ■ ■ ■ and By = vii '2 ■ ■ ■ vn- 

By setting ci = / = ^ and pj = I'j = '^6 ob¬ 

tain a maximally entangled cat state, with yield {^)^, 
indicating an exponential fall-off. 
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VII. EXPERIMENTAL IMPLEMENTATION 


Recent experimental advances in quantum informa¬ 
tion processing and in the demonstration of quantum 
coherence in mesoscopic systems has been impressive, 
examples being trapped ion systems [23] and large bio¬ 
molecules |2S]. The key experimental challenge to im¬ 
plement our proposal is putting Bob’s obstacle in the 
superposition of “pass H, block V” and “pass V, block 
H”, which is a highly non-trivial requirement. 

Considerable experimental simplification happens in 
our scheme, while at the same time preserving essentially 
the same idea for counterfactual distribution of entan¬ 
glement, if we employ the semi-counterfactual quantum 
key distribution (ScQKD) protocol [TS], rather than N09, 
as the point of departure for counterfactual communica¬ 
tion from classical to quantum information. Moreover, 
a Mach-Zehnder interferometer version, rather than that 
using the Michelson interferometer, may be advantageous 
for an experimental demonstration, as is done in the ex¬ 
perimental realization of N09 [TU] . 

For the present purpose, the ScQKD scheme is simi¬ 
lar to N09 except that secret bits are encoded in terms 
of plain “pass” and “block” actions, rather than the 
polarization-specific blockade actions. The Michelson in¬ 
terferometer in Figure [2 remains the same, except that 
the fixed mirror at the top is replaced by a polarization- 
independent pass/block set-up similar to Bob’s. This 
set-up now forms Alice’s module. Counterfactual bits 
are generated in Di detections and happen only when 
precisely one of Alice and Bob applies “pass” and the 
other “block”. To be precise, the bits are counterfactual 
only with respect to the person applying the blockade. 
Thus it is counterfactual only on part of the runs with 
respect to the distant agent, Bob, hence the name semi- 
counterfactual. By replacing Alice’s and Bob’s classical 
choices by superpositions of the type 1 pass) -I-/3j| block) 
{j = A,B), one counterfactually and probabilistically 
generates entanglement of the (unnormalized) form 

/3b I pass) AI block) B -I-/3AaB|block)A|pass)B, (20) 


where the first and second registers refer to Alice’s and 
Bob’s systems. 

We note that in ScQKD, both bits are counterfactual 
with respect to one of Alice and Bob. Moreover, Alice 
and Bob are spatially separated. Both these features are 
relaxed in the Kwiat et al. scheme p6] (where only the 
“block” option is counterfactual with respect to Alice or 
Bob), though at the price of requiring a chain of beam 
splitter actions. Thus, an alternative, and in some ways, 
even simpler first step towards experimental implementa¬ 
tion of counterfactual distribution of entanglement would 
be the semi-counterfactual generation of entanglement of 
the type ([^. 

We suggest two broad ways to experimentally achieve 
such superposition states (20) of the obstacle: one us¬ 
ing spatial Schrodinger cat states and the other using a 


special kind of electromagnetically induced transparency 
(FIT) systems. 

In the first way, Bob’s system is put in the superposi¬ 
tion of being present and absent in the communication 
channel. The presence of the obstacle would correspond 
to the “block” action and the absence to the “pass” ac¬ 
tion on the photon. Trapped ions [231 are possible can¬ 
didate systems here. 

The second way to realize the quantum obstacle 
is as a mesoscopic system placed in a quantum su¬ 
perposition of being transparent and opaque to pho¬ 
tons passing through the channel. A possible candi¬ 
date here is of a cloud of Rydberg atom confined in a 
trapping potential localized within the blockade radius 
m- Owing to the dipole-dipole interaction between 
the atoms, they show collective excitation of the form 
|3?) = ■^Y.f=i\ 9 u 92 ,-■ ■ ,rj,-■ ■ on), where \gk) and 
\rk) are the ground and Rydberg excited states of the 
fcth atom. Otherwise they remain in the ground state 
|G) = \gi,g 2 ,‘‘‘ ,gN)- The transition between \gk) and 
|rfe) is tuned to the energy of the photon used for com¬ 
munication. 

In the state |G) the cloud transitions to state \R) and 
thereby blocks the photon passage, whereas in the state 
\R) it is transparent to the photon. The superposition 
can be controlled by an atom located in a neighboring 
potential, which interacts with the cloud via long-range 
dipole forces such that depending on whether it is in 
state \g) or |r), the cloud is put in the state |G) and 
\R). Preparing the control atom in an intial superpo¬ 
sition state then produces the required superposition of 
the Rydberg cloud acting as the quantum obstacle. 


VIII. PHYSICAL INTERPRETATION AND 
CONCLUSIONS 

Counterfactual communication belies our intuitive ex¬ 
pectation that for Bob to send information to Alice, a 
physical particle must be exchanged between them. The 
counterfactual generation of entanglement, of the kind 
presented here, accentuates this puzzle. 

One point worth noting about cryptography in the 
counterfactual scenario is the following: It might appear 
that because no physical travel happens in the open chan¬ 
nel during counterfactual instances, thus the information 
has ultimate security. But this is not so HZ], since Eve’s 
intervention can physicalize the particle. Thus security 
must be judged on the basis of a traditional analysis of 
observed visibilities, photon counts, details of an eaves¬ 
dropper’s attack, etc. All the same, the issue of useful¬ 
ness of counterfactual communication for cryptography 
and long-distance communication is an area worth inves¬ 
tigating. 

From a quantum foundations perspective, counterfac¬ 
tual quantum communication appears to support an on- 
tic interpretation of the wave function that is indepen¬ 
dent of any particular ontological framework. During a 
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Di detection, there was no physical travel of the particle, 
in that, a physical travel would have resulted in absorp¬ 
tion. Yet Bob’s choice does influence Alice’s observation, 
given that he communicates information. In order to 
maintain the philosophical viewpoint that Bob’s action 
is related to her observation not by a remote influence but 
through a continuous movement of some cause or infor¬ 
mation in physical space [20) . we are led to ascribe some 
sort of reality to the wave function (the vacuum state, 
cf. [20]) that propagates from Alice to Bob, and back 
to her. This conclusion does not require any ontologi¬ 
cal framework [28] , but instead requires only operational 
considerations about communication (cf. [29)1. 

Here we summarize how our scheme for counterfac- 
tual distribution of entanglement (and for counterfac- 
tual quantum information transfer built on top of it) 
is distinct from the counterfactual schemes proposed in 
Refs. [^ 122] • The scheme in |2I| is one for determin¬ 
istic counterfactual quantum state transfer, requiring no 
classical communication and that in [22] first determinis¬ 
tically and counterfactually distributes state-dependent 
entanglement, which can be used for deterministic quan¬ 
tum state transfer with a 1-bit classical communication 
(Quantum information transfer of lower hdelity is possi¬ 
ble without the classical assistance). In contrast to these 
two schemes, our scheme is probabilistic. It bears a sim¬ 
ilarity to the scheme of [22] in that it distributes state- 
dependent entanglement, which can subequently be used 
for deterministic quantum state transfer using one bit of 
classical communication. The probabilistic nature of our 
scheme means (as discussed in Section 0 that on aver¬ 
age, the minimum number of photons required for the 
counterfactual generation of state-dependent entangle¬ 
ment is C™’" = 8 particles, with beam splitter reflectivity 
i? = ^. Further, the minimum average classical commu¬ 
nication cost for counterfactual quantum state transfer is 
« 4.85 bits, with reflectivity R = V2-1 « 0.414. 
From an experimental perspective, of significance is that 
the schemes of [23 [22] are based on CQZE, which re¬ 
quires chaining the actions of a number of beam split¬ 


ters. whereas our scheme is probabilistic and uses the 
experimentally simple Michelsen interferometer set-up. 

Our method of generalizing the counterfactual dis¬ 
tribution of bipartite entanglement to multi-partite cat 
states, essentially by making the quantum obstacle in the 
N09 system to act jointly on multiple particles, can also 
be applied to CQZE systems. To see this suppose that N 
copies of the L-cycle system in Eq. Q being vertically 
stacked, with the obstacle being applied jointly to all N 
stack layers. Then Eq. Q becomes: 

|block)|0)®^ —^ cos-^^6»|block)|0)®^ (21) 

|pass)|0)®^ |pass)(cos(L0)|O) +sin(L0)|l))®^, 

As before let 6 = 7r/2L and L —>■ oo. Then, Bob’s obsta¬ 
cle in the state a|pass) -I- /3|block) leads to: 

(a|pass)-f/3|block))|0)®^ 

^ a I pass) 11)®^ + /3|block)|0)®^, (22) 

an {N + l)-particle cat state, which generalizes the bi¬ 
partite superposition of Eq. ([^. By placing the above 
system in an external M-chain of interferometers, so that 
each of the N layers in the above vertical stack is a CQZE 
L-in-M cyclic interferometer, one can analogously im¬ 
plement a deterministic counterfactual distribution of a 
{N + l)-cat state in place of state that extends the 
bi-partite scheme of [22] . 

Finally, we briefly mention some future directions 
opened up by our work. Our study, which considers the 
noiseless case, may be extended to the open system sit¬ 
uation, which would be relevant for purposes of practi¬ 
cal implementation. Multipartite quantum information 
processing protocols based on conventional methods of 
entanglement generation can be readily adapted to ones 
based on the present counterfactually generation entan¬ 
glement. 
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